Define and document the project security policy

[kevinpollet]

Proposal

At some point, Maesh will experience security issues. To handle them gracefully, we should document our security policy and define, at least:

• How and where security vulnerabilities will be reported.
• How to disclose a security vulnerability responsibly.

We should have a look at the GitHub Security policy feature and use the Traefik security policy as an example.